Ngesonto eledlule, abathuthukisi besiphathi sephasiwedi esidumile i-LastPass bakhiphe isibuyekezo esilungisa ubungozi obungaholela ekuvuzeni kwedatha yomsebenzisi. Udaba lwamenyezelwa ngemuva kokuthi luxazululiwe futhi abasebenzisi be-LastPass belulekwa ukuthi babuyekeze umphathi wabo wephasiwedi enguqulweni yakamuva.
Sikhuluma ngobungozi obungase busetshenziswe abahlaseli ukweba idatha efakwe umsebenzisi kuwebhusayithi yokugcina evakashelwe. Inkinga yatholwa ngenyanga edlule nguTavis Ormandy, ilungu lephrojekthi ye-Google Project Zero, eyenza ucwaningo emkhakheni wezokuphepha kolwazi.
I-LastPass okwamanje iyimenenja yephasiwedi edume kakhulu. Onjiniyela balungise ukuba sengozini okukhulunywe ngakho ngaphambilini kunguqulo 4.33.0, okwatholakala esidlangalaleni ngoSepthemba 12. Uma abasebenzisi ungasebenzisi okuzenzakalelayo update sici LastPass, bayelulekwa ukuba mathupha inguqulo yakamuva ye-software. Lokhu kudinga ukwenziwa ngokushesha ngangokunokwenzeka, ngoba ngemva kokulungisa ubungozi, abacwaningi bashicilele imininingwane yayo, engasetshenziswa abahlaseli ukweba amaphasiwedi kumadivayisi lapho uhlelo lokusebenza lungakabuyekezwa.
Ukuxhashazwa kokuba sengozini kubandakanya ukusetshenziswa kwekhodi ye-JavaScript enonya kudivayisi eqondiwe, ngaphandle kokusebenzelana komsebenzisi. Abahlaseli bangayenga abasebenzisi kumasayithi anonya ukuze bantshontshe imininingwane egcinwe kusiphathi sephasiwedi. U-Tavis Ormandy ukholelwa ukuthi ukuxhaphaza ubungozi kulula kakhulu, njengoba abahlaseli bangakwazi ukufihla isixhumanisi esinonya, bakhohlise umsebenzisi ukuthi asichofoze ukuze antshontshe imininingwane efakwe kusayithi langaphambilini.
Abamele i-LastPass abaphawuli ngalesi simo. Okwamanje, azikho izimo ezaziwayo lapho lobu bungozi busetshenziswe abahlaseli.
Source: 3dnews.ru